Astrabert

Name of the Vulnerable Software and Affected Versions: run-llama/llama index versions 0.12.27 through 0.12.40 Description: A path traversal vulnerability exists, specifically within the `encode image` function in `generic utils.py`, allowing an attacker to manipulate the `image path` input to read arbitrary files on the server, including sensitive system files. This issue arises due to improper validation or sanitization of the file path, enabling path traversal sequences to access files outside the intended directory. Recommendations: For run-llama/llama index versions 0.12.27 through 0.12.40, update to version 0.12.41 to resolve the issue. As a temporary workaround, consider restricting access to the `encode image` function in `generic utils.py` to minimize the risk of exploitation. Avoid using the `image path` input in the affected function until the issue is resolved.

Name of the Vulnerable Software and Affected Versions: llama index versions v0.12.27 through v0.12.40 Description: A critical deserialization vulnerability exists in the JsonPickleSerializer component of the llama index library. This vulnerability allows remote code execution due to an insecure fallback to Python's pickle module. The JsonPickleSerializer prioritizes deserialization using `pickle.loads()`, which can execute arbitrary code when processing untrusted data. Attackers can exploit this by crafting malicious payloads to achieve full system compromise. The root cause includes an insecure fallback mechanism, lack of validation or safeguards, misleading design, and violation of Python security guidelines. Recommendations: For versions v0.12.27 through v0.12.40, consider disabling the `JsonPickleSerializer` component until a patch is available. Restrict access to the `pickle.loads()` function to minimize the risk of exploitation. Avoid using the `JsonPickleSerializer` component with untrusted data until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: llama index version 0.12.27 Description: A flaw in the ObsidianReader class allows for hardlink-based path traversal, enabling attackers to bypass path restrictions and access sensitive system files, such as /etc/passwd, by exploiting hardlinks. This issue arises from inadequate handling of hardlinks in the `load data()` method. Recommendations: For version 0.12.27, update to version 0.5.2 to resolve the issue. As a temporary workaround, consider restricting access to sensitive system files to minimize the risk of exploitation.